CVE-2006-5307: Afgb Guestbook

High severity, CVSS 7.5. EPSS: 9.7% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in (1) add.php, (2) admin.php, (3) look.php, or (4) re.php.

Affected products

• Afgb Afgb Guestbook: version 2.2 only

Published 2006-10-17. Last modified 2026-06-16.